Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.mft
File: 3qSlB60VhloLLuwJ67TnVFf0AYs.mft (raw, json)
Hash identifier: 0PU9mBXwpqaNLStEp6vgapnFBZzRvBAIwTGyGE3fJ5U=
Subject key identifier: B2:DD:AE:03:54:71:D3:8C:FD:A6:8E:97:37:CD:D0:B3:ED:56:1A:B1
Authority key identifier: DE:A4:A5:07:AD:15:86:5A:0B:2E:EC:09:EB:B4:E7:54:57:F4:01:8B
Certificate issuer: /CN=dea4a507ad15865a0b2eec09ebb4e75457f4018b
Certificate serial: 019E31F2CE12114AF6AE97BA11F1C6A5F158
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3qSlB60VhloLLuwJ67TnVFf0AYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.mft
Manifest number: 0335
Signing time: Sat 16 May 2026 18:00:56 +0000
Manifest this update: Sat 16 May 2026 18:00:56 +0000
Manifest next update: Sun 17 May 2026 18:00:56 +0000
Files and hashes: 1: 3qSlB60VhloLLuwJ67TnVFf0AYs.crl (hash: wOdZ/v59e7Ya1LtpoSxsniDV7U8rbIdBREc57Vsiq2I=)
2: UcfLZ7L91GVWjLGWEYmlJV2c10o.roa (hash: uVZ/PpG6ROCuILZTxmMA8qXeD47uyabcF2INsekoGNc=)
3: n_N9Ah4Rw1Wp9Z-3SVYIy6Y0wC4.roa (hash: 2wd1XBjZMp+nPiV7QP5P7/6ushDvOEw3Nbs3DojVSrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3qSlB60VhloLLuwJ67TnVFf0AYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 18:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:f2:ce:12:11:4a:f6:ae:97:ba:11:f1:c6:a5:f1:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dea4a507ad15865a0b2eec09ebb4e75457f4018b
Validity
Not Before: May 16 18:00:56 2026 GMT
Not After : May 17 18:00:56 2026 GMT
Subject: CN=b2ddae035471d38cfda68e9737cdd0b3ed561ab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3d:14:d5:05:76:28:a8:70:ed:81:58:4b:d4:
9f:7c:eb:ed:9c:be:9e:a9:4c:bc:a7:ed:ed:ff:8a:
76:cb:6b:06:10:5a:8a:7b:20:19:35:0c:1f:d4:f3:
38:1b:a3:d4:da:c3:40:02:69:6b:0e:c6:37:0e:69:
94:3d:11:78:9c:a6:39:ed:99:a4:17:94:eb:71:2c:
26:2c:ce:20:4d:3c:9c:a8:e4:a7:de:b0:21:39:e1:
65:12:ac:4d:a6:3e:d9:7d:10:ea:eb:b0:05:a9:1e:
0e:3f:3b:b1:7e:28:61:58:29:fd:37:b4:a9:fe:da:
64:dc:51:c6:d0:4c:1a:18:7c:ec:b5:dd:c2:f1:df:
c5:98:ba:2a:e8:cd:b1:e8:52:33:72:09:9a:7a:1e:
fb:dc:f9:39:29:d1:ad:8b:ca:67:1a:20:87:d9:01:
68:25:b0:d2:f6:a0:37:04:90:0b:c6:ff:68:2e:f9:
f6:bd:c6:b8:a4:0c:74:27:0d:1e:23:06:25:a8:01:
ff:ff:6a:19:2a:9e:11:5b:2c:74:87:14:ef:5f:87:
28:a5:8c:24:b0:71:09:e8:c2:4a:7b:8e:1c:28:ce:
d9:5d:bb:22:33:bf:c8:52:50:30:d4:71:9f:e8:26:
5a:61:82:f4:4b:f5:dd:95:76:91:31:35:71:a8:76:
44:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:DD:AE:03:54:71:D3:8C:FD:A6:8E:97:37:CD:D0:B3:ED:56:1A:B1
X509v3 Authority Key Identifier:
keyid:DE:A4:A5:07:AD:15:86:5A:0B:2E:EC:09:EB:B4:E7:54:57:F4:01:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3qSlB60VhloLLuwJ67TnVFf0AYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:b9:4b:3b:8a:b5:4c:88:66:33:6f:8b:4f:a8:09:f1:6d:74:
25:08:75:63:b4:f0:ff:cc:11:7b:c2:e6:7f:0b:66:79:02:ee:
4c:ff:f9:02:e6:7f:ff:6e:95:79:62:17:72:b1:53:51:4e:32:
30:59:9f:e7:72:c1:d1:4c:81:97:e9:33:dd:29:0f:81:22:3f:
12:4f:13:e7:b4:b2:66:bc:0e:4c:99:09:83:9b:23:d5:96:99:
fa:d9:ad:6f:33:31:77:0b:02:d3:eb:80:9b:e8:27:1e:b9:61:
3e:73:2c:c7:2f:e8:53:43:76:aa:6c:b6:bc:df:d3:1b:02:f2:
be:3e:dc:ab:2b:a0:0f:40:f3:d6:f4:5a:4c:2c:5d:b1:e2:d0:
ea:ae:c4:8c:5f:ab:65:10:44:1e:4c:97:2c:9d:bc:61:b5:a8:
c4:76:c2:66:b1:41:f6:ad:15:1b:a1:b7:15:25:7a:36:dc:f0:
1c:5b:a1:ca:4b:d1:27:8b:7a:c7:2b:43:bd:7c:0b:e2:53:ae:
57:44:5a:ef:c0:ee:50:b0:f5:a3:ab:c0:6e:7a:45:c6:98:a0:
15:1d:42:9b:96:00:b7:70:f6:95:c6:c9:1a:51:98:68:5c:3c:
78:33:80:5f:59:9e:5d:4e:aa:30:dc:79:95:f9:d1:14:df:6f:
2c:12:c3:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4x8s4SEUr2rpe6EfHGpfFYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlYTRhNTA3YWQxNTg2NWEwYjJlZWMwOWViYjRlNzU0NTdm
NDAxOGIwHhcNMjYwNTE2MTgwMDU2WhcNMjYwNTE3MTgwMDU2WjAzMTEwLwYDVQQD
EyhiMmRkYWUwMzU0NzFkMzhjZmRhNjhlOTczN2NkZDBiM2VkNTYxYWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyz0U1QV2KKhw7YFYS9SffOvtnL6e
qUy8p+3t/4p2y2sGEFqKeyAZNQwf1PM4G6PU2sNAAmlrDsY3DmmUPRF4nKY57Zmk
F5TrcSwmLM4gTTycqOSn3rAhOeFlEqxNpj7ZfRDq67AFqR4OPzuxfihhWCn9N7Sp
/tpk3FHG0EwaGHzstd3C8d/FmLoq6M2x6FIzcgmaeh773Pk5KdGti8pnGiCH2QFo
JbDS9qA3BJALxv9oLvn2vca4pAx0Jw0eIwYlqAH//2oZKp4RWyx0hxTvX4copYwk
sHEJ6MJKe44cKM7ZXbsiM7/IUlAw1HGf6CZaYYL0S/XdlXaRMTVxqHZEtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLLdrgNUcdOM/aaOlzfN0LPtVhqxMB8GA1UdIwQY
MBaAFN6kpQetFYZaCy7sCeu051RX9AGLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3FTbEI2MFZobG9MTHV3SjY3VG5WRmYwQVlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9iNDkxZTAtMTk0MS00MjczLTlhMjUt
OTIyZTIyNDQ1OWZiLzEvM3FTbEI2MFZobG9MTHV3SjY3VG5WRmYwQVlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9iNDkxZTAtMTk0MS00MjczLTlhMjUtOTIyZTIyNDQ1OWZi
LzEvM3FTbEI2MFZobG9MTHV3SjY3VG5WRmYwQVlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo7lLO4q1
TIhmM2+LT6gJ8W10JQh1Y7Tw/8wRe8LmfwtmeQLuTP/5AuZ//26VeWIXcrFTUU4y
MFmf53LB0UyBl+kz3SkPgSI/Ek8T57SyZrwOTJkJg5sj1ZaZ+tmtbzMxdwsC0+uA
m+gnHrlhPnMsxy/oU0N2qmy2vN/TGwLyvj7cqyugD0Dz1vRaTCxdseLQ6q7EjF+r
ZRBEHkyXLJ28YbWoxHbCZrFB9q0VG6G3FSV6NtzwHFuhykvRJ4t6xytDvXwL4lOu
V0Ra78DuULD1o6vAbnpFxpigFR1Cm5YAt3D2lcbJGlGYaFw8eDOAX1meXU6qMNx5
lfnRFN9vLBLDSg==
-----END CERTIFICATE-----
Generated at Sun May 17 03:02:06 2026 by rpki-client